Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
File:                     B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json)
Hash identifier:          McQpp6AE9I47UaRlH+ViL9zo6wedlBuvqra9zPGcXuA=
Subject key identifier:   41:70:97:31:9F:17:4C:11:63:B5:3F:B8:87:7E:9B:67:83:1D:2E:C7
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Certificate issuer:       /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
Manifest number:          90
Signing time:             Sun 01 Mar 2026 08:50:50 +0000
Manifest this update:     Sun 01 Mar 2026 08:50:50 +0000
Manifest next update:     Sun 08 Mar 2026 08:50:50 +0000
Files and hashes:         1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: eYXHXKqYi77b9VIM9IpgjtU5yBkf/g8UJnlQ5O48tZo=)
                          2: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: Vx9bjwI4dHIiRJ2+GamwQlhazgaJYjGaTfAlSelDl0M=)
                          3: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: uhQqMpiNXl9wZzktHIlfZ4N3ckT6gZ7yXsNLkz5TVAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
                          rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:50:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
        Validity
            Not Before: Mar  1 08:50:50 2026 GMT
            Not After : Mar  8 08:50:50 2026 GMT
        Subject: CN=69a3fdea-2d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:00:0d:fb:78:2f:e5:d7:bb:c3:26:6c:90:18:
                    b5:96:52:6a:d4:46:4c:91:75:35:a5:5b:01:81:cd:
                    19:63:11:ba:d0:c1:63:4f:10:a4:a3:95:ab:78:d2:
                    c6:ee:ed:9b:59:b4:50:82:a1:eb:03:0f:b9:0b:2e:
                    06:8e:fc:f1:a8:5c:f4:c1:a4:d6:ac:ad:48:ea:11:
                    55:c0:e5:84:64:08:95:6c:e5:e2:82:6a:f2:6b:45:
                    d9:71:bb:1f:03:18:64:2c:a0:ed:e3:4f:a9:25:45:
                    59:a7:02:8c:5b:08:20:66:b5:54:b2:91:5e:ba:e2:
                    34:26:5b:2c:8b:c3:ea:d0:89:24:07:3b:94:44:6a:
                    23:97:6e:68:6d:21:21:e5:34:6e:e6:ad:09:5b:96:
                    23:17:ae:ad:22:13:ef:e5:82:d5:29:f6:6d:75:0b:
                    6f:96:b6:60:25:b9:2d:f5:54:88:89:a1:a0:cf:47:
                    8c:1a:ed:17:d8:4a:41:8c:fe:f6:47:42:70:0b:33:
                    a2:0d:e0:f1:de:f8:9a:eb:cd:cf:92:16:46:78:1b:
                    c3:6b:2f:51:2d:a6:b7:8e:5e:7e:a8:72:c4:d3:6b:
                    ea:6a:5d:ca:27:ed:c6:0a:3f:22:9a:16:bd:6b:83:
                    8c:65:ad:37:95:6f:74:62:16:64:d8:cb:a6:ea:63:
                    05:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:70:97:31:9F:17:4C:11:63:B5:3F:B8:87:7E:9B:67:83:1D:2E:C7
            X509v3 Authority Key Identifier:
                keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:80:16:68:b6:45:be:f2:4e:b6:bc:f4:61:ad:bc:bd:ec:21:
         57:eb:ad:eb:c9:4e:8e:1e:c6:84:b0:cc:86:0c:c6:c2:7d:1b:
         2e:f0:cf:72:ee:e0:c6:96:48:3c:56:54:40:e2:76:77:2f:46:
         2f:0d:a4:b3:fa:de:a0:f0:68:82:b2:11:4d:7a:37:41:d6:e5:
         47:76:6b:7a:27:48:20:c0:f1:57:d2:fd:f1:24:ce:eb:67:fd:
         82:53:e4:99:a7:d3:7e:80:a4:99:be:42:30:7b:0b:51:d1:d1:
         06:6e:5d:7c:38:d0:7c:d4:00:62:a9:bf:7f:70:90:83:85:15:
         db:0f:25:3c:c7:e6:57:18:16:f2:11:ec:ab:14:88:9d:33:fe:
         09:25:dd:fd:32:66:39:3d:6f:7e:ae:64:81:56:64:75:48:3b:
         e7:c3:b8:a7:b8:ab:5b:07:33:cd:6d:a5:ac:56:63:27:c1:bb:
         23:f5:33:1a:c0:13:c3:5e:ab:37:df:10:0b:d7:49:43:86:80:
         aa:76:40:aa:86:6a:9c:0c:c9:84:64:a6:a7:04:a8:e3:b4:1d:
         c2:df:0e:b1:6a:7f:62:94:18:d3:16:d5:d2:27:51:1c:ba:f2:
         bc:6e:c2:55:2b:fd:b2:d6:b6:52:bf:3c:29:b8:56:65:b7:b7:
         02:61:52:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:51 2026 by rpki-client